{"investigation":{"slug":"tectonic","entity_name":"Tectonic","trust_score":42,"severity_base":null,"score_modifier":0,"confidence":0.62,"status":"published","content_type":"investigation","summary":"Tectonic is a decentralized money market protocol on the Cronos blockchain, operating as a fork of Compound, that allows users to lend and borrow cryptocurrency assets. Launched in December 2021 by Gary Or (former CTO of Crypto.com) and incubated by Particle B and Cronos Labs, the protocol reached approximately $1 billion TVL at peak in early 2022 before collapsing over 95% alongside the broader crypto bear market. A disclosed reentrancy vulnerability in the staking contract was reported in March 2024 allowing potential extraction of millions in a single transaction, and a separate flash loan exploit in February 2024 resulted in approximately $250,000 in losses.","sections":[{"content":"Tectonic is an algorithmic, non-custodial money market protocol deployed on the Cronos EVM blockchain. It was announced in November 2021 and launched in December 2021. The protocol is a direct fork of Compound Finance — one of the most-tested DeFi lending codebases — adapted for the Cronos network. Users can supply assets to earn interest or borrow assets against deposited collateral. Key assets supported include CRO, WBTC, ETH, USDC, USDT, ATOM, and DAI. In 2023 the team introduced Isolated Pools, which separate riskier assets such as LCRO and LATOM from the core lending pool to contain potential contagion. Tectonic is accessible via the Crypto.com DeFi Wallet and integrates with the broader Cronos ecosystem, giving it access to Crypto.com's retail user base. The native governance token is TONIC, with a fixed total supply of 500 trillion tokens.","heading":"Protocol Overview","sources":[{"url":"https://medium.com/tectonicfi/introducing-tectonic-da19344b6144","name":"medium.com","type":"other","credibility":3},{"url":"https://tectonic.finance/","name":"tectonic.finance","type":"other","credibility":3},{"url":"https://medium.com/tectonicfi/tectonic-mainnet-launch-d087fe485d8","name":"medium.com","type":"other","credibility":3},{"url":"https://medium.com/tectonicfi/tectonic-isolated-pools-92e6fd9183c8","name":"medium.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Tectonic was founded by Gary Or, who previously served as Chief Technology Officer of Crypto.com and brings over ten years of full-stack engineering experience across payment, trading, and financial services infrastructure. The broader team is described in official materials as 'a decentralized team of BUIDLers segregated across the world,' comprising developers, strategists, and designers, though specific team members beyond Or are not publicly disclosed. The protocol was incubated by Particle B, a startup accelerator dedicated to projects built on the Cronos and Crypto.org chains, and is also an alumnus of the Cronos Labs incubation program. This institutional backing from the Crypto.com ecosystem confers both reputational legitimacy and exposure to any systemic risks in that ecosystem. The close relationship with Crypto.com represents a meaningful conflict-of-interest disclosure point: the Cronos chain itself is controlled by Crypto.com and Cronos Labs, meaning Tectonic's primary deployment environment is not neutral infrastructure.","heading":"Team and Institutional Background","sources":[{"url":"https://blog.cronos.org/p/cronos-ecosystem-spotlight-tectonic","name":"blog.cronos.org","type":"other","credibility":3},{"url":"https://tectonic.gitbook.io/docs/extras/cronos-labs-incubation","name":"tectonic.gitbook.io","type":"other","credibility":3},{"url":"https://medium.com/tectonicfi/introducing-tectonic-da19344b6144","name":"medium.com","type":"other","credibility":3},{"url":"https://www.thestandard.io/blog/tectonic-finance-the-comprehensive-financial-due-diligence","name":"thestandard.io","type":"other","credibility":3}],"severity":"medium"},{"content":"Two material security events have been documented. First, on February 22, 2024, Tectonic suffered an approximately $250,000 loss attributed to a flash loan new market exploit on the Cronos chain. The technique was classified as a protocol logic vulnerability involving Solidity smart contracts and is catalogued in DefiLlama's hacks database. No official post-mortem from the Tectonic team has been located in public sources. Second, a separate reentrancy vulnerability was disclosed in a public bug report dated March 22, 2024, targeting TectonicStakingPoolV3.sol (contract address 0xE165132FdA537FA89Ca1B52A647240c2B84c8F89). The flaw exists because the function performConversionForTokens() is publicly callable and allows reentrancy: an attacker inserts a malicious token into the swap path, diverts execution to an attacker-controlled contract during the token transfer, calls stakingPool.stake() to receive xTONIC tokens for free, and then receives the staked TONIC back as a 'reward.' A single attack with $23,000 in TONIC could extract over $2.5 million; repeated attacks could drain the entire staking contract. The bug report characterised the exploit difficulty as 'Easy.' The recommended fix is to guard performConversionForTokens() against reentrancy or to whitelist entire swap paths rather than only input/output tokens. There is no public confirmation from the Tectonic team that this specific vulnerability has been patched. The smart contracts were audited by the Cronos Labs security team and described as derived from Compound's codebase, which was previously audited by Trail of Bits and OpenZeppelin; however, the staking pool vulnerability post-dated those audits and was not caught prior to public disclosure.","heading":"Security Incidents and Vulnerabilities","sources":[{"url":"https://gist.github.com/fatherGoose1/690fa2d8245488b6750b67a0fdeb34bc","name":"gist.github.com","type":"other","credibility":3},{"url":"https://defillama.com/protocol/tectonic","name":"defillama.com","type":"other","credibility":3},{"url":"https://tectonic.gitbook.io/docs/introduction/faqs","name":"tectonic.gitbook.io","type":"other","credibility":3}],"severity":"medium"},{"content":"TONIC has a fixed total supply of 500 trillion tokens minted at genesis with distribution occurring over four years. Token allocation is: Community Incentives 50.9% (254.5 trillion), Team 23% (115 trillion, four-year vest), Ecosystem Reserve 13% (65 trillion), Network Security and Maintenance 13% (65 trillion), and Airdrop 0.1% (500 billion). The 23% team allocation on a four-year vest schedule represents a concentrated insider position. The 50.9% allocated to community incentives means a majority of supply enters circulation as liquidity mining and staking rewards, creating persistent sell pressure. As of mid-2026, approximately 247.73 trillion TONIC — roughly 49.5% of total supply — is in circulation. The TONIC token reached an all-time high of approximately $0.0000019 on February 8, 2022, shortly after the mainnet launch, and has since declined to approximately $0.000000072 by 2025, representing a loss of over 96% from peak. The market cap stood at approximately $4–10 million USD as of 2025–2026. The protocol announced a buyback-and-burn mechanism to offset inflationary pressure, but the adequacy of protocol revenue relative to emission volume has not been independently verified. Multiple analysts note that the extreme supply size makes price appreciation toward even $0.01 mathematically improbable without a commensurate order-of-magnitude increase in demand.","heading":"TONIC Token Economics and Inflation Risk","sources":[{"url":"https://medium.com/tectonicfi/tonic-tokenomics-and-airdrop-660b519e81c6","name":"medium.com","type":"other","credibility":3},{"url":"https://coinmarketcap.com/currencies/tectonic/","name":"coinmarketcap.com","type":"other","credibility":3},{"url":"https://www.coingecko.com/en/coins/tectonic","name":"coingecko.com","type":"other","credibility":3},{"url":"https://tokeninsight.com/en/coins/tectonic/tokenomics","name":"tokeninsight.com","type":"other","credibility":3},{"url":"https://www.gobankingrates.com/investing/crypto/what-is-tectonic-crypto/","name":"gobankingrates.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Tectonic rapidly accumulated TVL after its December 2021 launch, benefiting from high TONIC emission incentives and Cronos's marketing push. The protocol reached approximately $1 billion in TVL by early March 2022, making it the dominant protocol on Cronos by that measure. Total Cronos TVL peaked above $2 billion in February 2022, with Tectonic contributing the largest share. Following the broader crypto market downturn in mid-2022, Tectonic's TVL declined by more than 50% alongside the wider DeFi market. The protocol also announced a reduction of its collateral factor by 3% per day toward a 20% floor during this period, a risk management measure that simultaneously signalled concern about the collateral quality of listed assets. The TONIC price declined from its February 2022 all-time high of approximately $0.0000019 to $0.00000011 by July 2022 and continued declining through the bear market. In 2023, Cronos TVL recovered modestly, and Tectonic regained some TVL share alongside VVS Finance. As of 2025–2026, Tectonic remains operational but with a substantially lower TVL relative to its 2022 peak.","heading":"TVL History and Market Performance","sources":[{"url":"https://pexx.com/chaindebrief/top-3-tvl-protocol-on-cronos/","name":"pexx.com","type":"other","credibility":3},{"url":"https://bitkan.com/learn/tectonic-crypto-price-prediction-is-tectonic-a-good-cryptocurrency-4857","name":"bitkan.com","type":"other","credibility":3},{"url":"https://news.buildoncronos.com/p/cronos-evm-tvl-crosses-900m-usd-a","name":"news.buildoncronos.com","type":"other","credibility":3},{"url":"https://invezz.com/news/2023/11/15/cronos-cro-price-forms-a-double-top-as-vvs-finance-tectonic-tvl-rises/","name":"invezz.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Tectonic's on-chain governance is managed via xTONIC, the staked form of the TONIC token. xTONIC holders vote on key protocol decisions including parameter changes, new asset listings, interest rate model updates, and protocol upgrades. However, the protocol launched with no publicly identified governance forum or governance activity data available for review. The team retains a 23% token allocation on a four-year vesting schedule, which could constitute a significant voting bloc during the vesting period. The choice of Cronos as the sole deployment chain introduces a further centralization dependency: the Cronos chain is controlled by Crypto.com and Cronos Labs, meaning the base infrastructure layer is controlled by a single corporate entity. An emergency or regulatory action against Crypto.com could materially affect the Tectonic protocol's availability and user access. Isolated Pool listings introduce an additional governance risk: the bug report for the staking reentrancy vulnerability noted that low-liquidity token markets can be manipulated via price oracle abuse, a vector the isolated pool architecture does not fully mitigate. No evidence of an active, functioning DAO with independent community governance has been located in public sources.","heading":"Governance and Centralization Risks","sources":[{"url":"https://tectonic.gitbook.io/docs/introduction/faqs","name":"tectonic.gitbook.io","type":"other","credibility":3},{"url":"https://medium.com/tectonicfi/tonic-tokenomics-and-airdrop-660b519e81c6","name":"medium.com","type":"other","credibility":3},{"url":"https://medium.com/tectonicfi/tectonic-isolated-pools-92e6fd9183c8","name":"medium.com","type":"other","credibility":3},{"url":"https://gist.github.com/fatherGoose1/690fa2d8245488b6750b67a0fdeb34bc","name":"gist.github.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Tectonic appears in AVOID.NET's database with a ZachXBT source tag, indicating the protocol has been flagged by on-chain investigator ZachXBT. The specific nature, date, and content of ZachXBT's flag regarding Tectonic could not be independently verified through public web searches conducted in May 2026. No public tweet, Telegram post, or Substack article from ZachXBT specifically addressing Tectonic has been located in accessible sources. The flag is therefore noted but treated as low-confidence pending primary source verification. Users should treat the ZachXBT flag as a signal warranting caution and independent due diligence rather than a confirmed finding.","heading":"ZachXBT Flag","sources":[{"url":"https://twitter.com/tectonicfi?lang=en","name":"twitter.com","type":"other","credibility":3},{"url":"https://en.wikipedia.org/wiki/ZachXBT","name":"en.wikipedia.org","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2021-11-04","event":"Tectonic announced via Medium as a cross-chain money market on Cronos, with a planned beta launch end of November 2021 and official launch in mid-December 2021.","source":""},{"date":"2021-12","event":"Tectonic mainnet launched on the Cronos blockchain with the TONIC governance token.","source":"","date_original":"2021-12-01"},{"date":"2021-12-23","event":"TONIC reached its all-time high price of approximately $0.000001913 shortly after mainnet launch, driven by high emission incentives and Cronos ecosystem hype.","source":""},{"date":"2022-01-18","event":"Snapshot taken for the TONIC airdrop to eligible VVS token holders; airdrop redemption opened February 14, 2022.","source":""},{"date":"2022-02-08","event":"Cronos ecosystem TVL surpassed $2 billion; Tectonic was the dominant protocol by TVL share. TONIC price reached approximately $0.0000019.","source":""},{"date":"2022-03","event":"Tectonic TVL reached approximately $1 billion, confirming it as the leading money market on Cronos.","source":"","date_original":"2022-03-01"},{"date":"2022-03-14","event":"Protocol announced reduction of collateral factor by 3% per day toward a 20% floor, a risk management measure amid market volatility; TONIC trading near $0.0000007.","source":""},{"date":"2022-07-23","event":"TONIC reached a then-low of approximately $0.00000011 as the crypto bear market deepened and TVL declined by more than 50%.","source":""},{"date":"2022-12-05","event":"Tectonic launched Ambassador Program to rebuild community engagement.","source":""},{"date":"2023-01-31","event":"Team published 'Protocol Updates for Year 2,' announcing adjustments to the TONIC emission schedule for the second year.","source":""},{"date":"2023-03-17","event":"Tectonic announced Isolated Pools feature to separate high-risk assets into contained lending pools.","source":""},{"date":"2023-03-29","event":"First Isolated Pool launched with LCRO as the listed collateral asset.","source":""},{"date":"2024-02-22","event":"Tectonic suffered approximately $250,000 in losses from a flash loan new market exploit on Cronos, classified as a protocol logic vulnerability. This is catalogued in DefiLlama's hacks database.","source":""},{"date":"2024-03-22","event":"A public bug report disclosed a reentrancy vulnerability in TectonicStakingPoolV3.sol (0xE165132FdA537FA89Ca1B52A647240c2B84c8F89) allowing free minting of xTONIC tokens. An attacker with $23,000 in TONIC could extract over $2.5 million per transaction. The exploit was rated 'Easy' difficulty.","source":""},{"date":"2024-07-08","event":"Team published a Roadmap Update on Medium, the most recent identified blog post, indicating the protocol remains active but with sparse public communications.","source":""}],"sources_used":[{"url":"https://medium.com/tectonicfi/introducing-tectonic-da19344b6144","name":"medium.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://tectonic.finance/","name":"tectonic.finance","type":"other","archive_url":"http://web.archive.org/web/20260820001320/https://tectonic.finance/","credibility":3,"archive_timestamp":"2026-08-20T00:13:20+00:00"},{"url":"https://medium.com/tectonicfi/tectonic-mainnet-launch-d087fe485d8","name":"medium.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://medium.com/tectonicfi/tectonic-isolated-pools-92e6fd9183c8","name":"medium.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://blog.cronos.org/p/cronos-ecosystem-spotlight-tectonic","name":"blog.cronos.org","type":"other","archive_url":"http://web.archive.org/web/20260206231233/https://blog.cronos.org/p/cronos-ecosystem-spotlight-tectonic","credibility":3,"archive_timestamp":"2026-02-06T23:12:33+00:00"},{"url":"https://tectonic.gitbook.io/docs/extras/cronos-labs-incubation","name":"tectonic.gitbook.io","type":"other","archive_url":"http://web.archive.org/web/20260416052428/https://tectonic.gitbook.io/docs/extras/cronos-labs-incubation","credibility":3,"archive_timestamp":"2026-04-16T05:24:28+00:00"},{"url":"https://www.thestandard.io/blog/tectonic-finance-the-comprehensive-financial-due-diligence","name":"thestandard.io","type":"other","archive_url":"http://web.archive.org/web/20260306144156/https://www.thestandard.io/blog/tectonic-finance-the-comprehensive-financial-due-diligence","credibility":3,"archive_timestamp":"2026-03-06T14:41:56+00:00"},{"url":"https://gist.github.com/fatherGoose1/690fa2d8245488b6750b67a0fdeb34bc","name":"gist.github.com","type":"other","archive_url":"https://web.archive.org/web/20260829133909/https://gist.github.com/fatherGoose1/690fa2d8245488b6750b67a0fdeb34bc","credibility":3,"archive_timestamp":"2026-08-29T13:39:09+00:00"},{"url":"https://defillama.com/protocol/tectonic","name":"defillama.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://tectonic.gitbook.io/docs/introduction/faqs","name":"tectonic.gitbook.io","type":"other","archive_url":"http://web.archive.org/web/20260821124453/https://tectonic.gitbook.io/docs/introduction/faqs","credibility":3,"archive_timestamp":"2026-08-21T12:44:53+00:00"},{"url":"https://medium.com/tectonicfi/tonic-tokenomics-and-airdrop-660b519e81c6","name":"medium.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://coinmarketcap.com/currencies/tectonic/","name":"coinmarketcap.com","type":"other","archive_url":"http://web.archive.org/web/20260411122547/https://coinmarketcap.com/currencies/tectonic/","credibility":3,"archive_timestamp":"2026-04-11T12:25:47+00:00"},{"url":"https://www.coingecko.com/en/coins/tectonic","name":"coingecko.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://tokeninsight.com/en/coins/tectonic/tokenomics","name":"tokeninsight.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.gobankingrates.com/investing/crypto/what-is-tectonic-crypto/","name":"gobankingrates.com","type":"other","archive_url":"http://web.archive.org/web/20260314222922/https://www.gobankingrates.com/investing/crypto/what-is-tectonic-crypto/","credibility":3,"archive_timestamp":"2026-03-14T22:29:22+00:00"},{"url":"https://pexx.com/chaindebrief/top-3-tvl-protocol-on-cronos/","name":"pexx.com","type":"other","archive_url":"http://web.archive.org/web/20251130235801/https://pexx.com/chaindebrief/top-3-tvl-protocol-on-cronos/","credibility":3,"archive_timestamp":"2025-11-30T23:58:01+00:00"},{"url":"https://bitkan.com/learn/tectonic-crypto-price-prediction-is-tectonic-a-good-cryptocurrency-4857","name":"bitkan.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://news.buildoncronos.com/p/cronos-evm-tvl-crosses-900m-usd-a","name":"news.buildoncronos.com","type":"other","archive_url":"http://web.archive.org/web/20260414160607/https://news.buildoncronos.com/p/cronos-evm-tvl-crosses-900m-usd-a","credibility":3,"archive_timestamp":"2026-04-14T16:06:07+00:00"},{"url":"https://invezz.com/news/2023/11/15/cronos-cro-price-forms-a-double-top-as-vvs-finance-tectonic-tvl-rises/","name":"invezz.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://twitter.com/tectonicfi?lang=en","name":"twitter.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://en.wikipedia.org/wiki/ZachXBT","name":"en.wikipedia.org","type":"other","archive_url":"http://web.archive.org/web/20260711020137/https://en.wikipedia.org/wiki/ZachXBT","credibility":3,"archive_timestamp":"2026-07-11T02:01:37+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:35.190101+00:00","updated_at":"2026-08-30T01:16:28.535192+00:00"}}